CVE-2022-23872: XSS

Published Jan 31, 2022

Updated

Emlog pro v1.1.1 was discovered to contain a stored cross-site scripting (XSS) vulnerability in the component /admin/configure.php via the parameter footerinfo.

Affected Software

1 affected component

Emlog emlog=1.1.1

Event History

Jan 31, 2022

CVE Published

via MITRE·09:26 PM

Data Sourced

via MITRE·09:26 PM

Description

Frequently Asked Questions

What is vulnerability CVE-2022-23872?

CVE-2022-23872 is a stored cross-site scripting (XSS) vulnerability in Emlog pro v1.1.1.

What is the severity of CVE-2022-23872?

The severity of CVE-2022-23872 is medium with a CVSS score of 4.8.

How can CVE-2022-23872 be exploited?

CVE-2022-23872 can be exploited by injecting malicious code into the footer_info parameter in the /admin/configure.php component of Emlog pro v1.1.1.

Is there a fix available for CVE-2022-23872?

Yes, a fix for CVE-2022-23872 is available. Users should update to a patched version of Emlog pro.

Where can I find more information about CVE-2022-23872?

More information about CVE-2022-23872 can be found at the following references: [https://github.com/emlog/emlog/issues/147](https://github.com/emlog/emlog/issues/147) and [https://github.com/truonghuuphuc/CVE](https://github.com/truonghuuphuc/CVE).